Yapeswap Exploit Exposes Governance Flaw, Costs $21,900
Yapeswap was exploited after a governance proposal passed despite WorkersUnion having a quorum requirement of zero, according to blockchain security firm SlowMist. The attacker reportedly held only about 0.000055% of voting power and used the proposal to transfer YapeFactory’s feeToSetter authority to their own address. They then installed a malicious Registry that made latestVault() return a fake vault while vaults() continued to list the genuine vaults. YapePair counted the misappropriated deposits as farming assets, but users received no redeemable shares. The reported loss was about $21,900. The Yapeswap incident highlights the risk of inadequate governance thresholds and mismatches between smart-contract functions. Traders should monitor any response from the project and assess exposure to its contracts; the reported loss is limited in scale but may weigh on confidence in Yapeswap.
Bearish
The incident is bearish for Yapeswap and sentiment toward DeFi security, but its direct market impact appears limited: the reported loss is about $21,900, and the article does not identify a broader contagion or major-asset exposure. In the short term, traders may reduce exposure to Yapeswap-related contracts or tokens, watch for paused services, recovery efforts, and possible withdrawals, and price in greater smart-contract risk. Similar exploits and governance attacks have often triggered sharp sell-offs in the affected project’s assets, even when the stolen amount was modest, because uncertainty about remaining vulnerabilities can matter more than the immediate loss. Longer term, the effect will depend on whether Yapeswap can secure the contracts, clarify user losses, and introduce meaningful quorum and voting controls. A wider market reaction would be more likely if the exploit affected shared infrastructure, prompted significant withdrawals, or revealed correlated vulnerabilities across other protocols. Based on the reported details alone, broader market stability is unlikely to be materially affected.